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00 ' Consider a quantum computer in combination with a binary oracle 

of domain size A^. It is shown how N/2 + \fN calls to the oracle are 
■ sufficient to guess the whole content of the oracle (being an A'^ bit string) 

with probability greater than 95%. This contrasts the power of classical 
^ I ^ , computers which would require A'' calls to achieve the same task. From 

f~| ■ this result it follows that any function with the A'' bits of the oracle as input 

' can be calculated using N/2 + y/N queries if we allow a small probability 

^ , of error. It is also shown that this error probability can be made arbitrary 

small by using N/2 + 0{\fN) oracle queries. 
^ I In the second part of the article 'approximate interrogation' is con- 

• ^ . sidered. This is when only a certain fraction of the A'' oracle bits are 

' requested. Also for this scenario does the quantum algorithm outperform 

^ , the classical protocols. An example is given where a quantum procedure 

. - - 1 with N/10 queries returns a string of which 80% of the bits are correct. 

Any classical protocol would need 6N/10 queries to establish such a cor- 
rectness ratio. 
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1 Introduction 



Recent research ^, |^ in quantum computation complexity has revealed sev- 
eral lower bounds on the capability of quantum computers to outperform classi- 
cal computers in the black-box setting. These results were proven by investigat- 
ing the required amount of queries to a black-box or oracle (with a domain size 
A'') in order to decide some general property of this function. For example, if we 
want to know the parity of the N black-box values with bounded error then it 
is still necessary for a quantum computer to call the black-box N/2 timcs||l|, ||. 
It has also been shown that for the exact calculation of certain functions (the 
bitwise OR for example) all N calls are required 

This paper on the other hand, presents an upper bound on the number of 
black-box queries that is necessary to compute any function over the N bits if 
we allow a small probability of error. More specifically, it will be shown that 
for every unknown oracle there is a potential speed-up of almost a factor of two 
if we want to know everything there is to know about the oracle function. By 
this the following is meant. If the domain of the oracle has size N, a classical 
computer will have to apply N calls in order to know all N bits describing the 
oracle. Here, it will be proven that a quantum computer can perform the same 
task with high probability using only N/2 + ^/N oracle calls. From this result it 
follows immediately that any (not necessarily binary) function F on the domain 
{0, 1} can be calculated with a small two-sided error using only N/2 + \/N 
calls. 

The factor-of-two gain can be increased by going to approximating interro- 
gation procedures. If we do not longer require to know all of the N bits but 
are instead already satisfied with a certain percentage of correct bits, then the 
difference between classical and quantum computation becomes bigger than for 
the above 'exact interrogation' case. An example of this is when we want to 
guess the string such that we can expect 80% of the bits to be correct. A quan- 
tum computer can do this with one-sixth of the queries that a classical computer 
requires (iV/10 versus 3A^/5 calls). This also illustrates that the procedure de- 
scribed here is not a 'superdense coding-in-disguise' which would only allow a 
reduction by a factor of two pi. 



2 Preliminaries 

The setting for this article is as follows. We try to investigate the potential 
differences between a quantum and a classical computer when both cases are 
confronted with an oracle u>. The only thing known in advance about this w 
is that it is a binary-valued function with a domain of size N . The oracle can 
therefore be described by an TV-bit string: uj — ujiuj2 ■ ■ ■ ujn G {0, 1}^. The goal 
for both computers is to obtain the whole string uj with high probability with as 
few oracle calls to uj as possible. The phrase "with high probability" means that 
the final answer of the algorithm should be exactly lu at least 95% of a time, 
for any possible lu. Note that we are primarily concerned with the complexity 
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of the algorithm in terms of oracle calls, both the time and space requirements 
of the algorithms are not considered when analysing the complexity differences. 
The model of an oracle as it used here goes also under the name of black-box, 
or database-query model. 

The suggested quantum algorithm uses two procedures which are well-known 
in quantum algorithm theory. For reasons of clarity those two procedures will 
be explained in this section before the actual algorithm is described. We assume 
that the reader is familiar with the basics of quantum computation[^ ^. 

2.1 One-Call Phase Kickback Trick 

Take an unknown function value / G {0, 1}. We want to induce a phase (—1)-'^ 
while calling the function only once. This can be done in the following way (as 
described by Cleve et aL[||). 

If we start in the state |5')(|0) — |l))/\/2 and we add (modulo 2) the value 
of / to the last bit, then the outcome will be 



V2 

This correctly induces the phase (—1)-'^ to the initial state 



2.2 Inner Product versus Hadamard Transform 

The Hadamard transform H is the one-qubit rotation that maps |0) to the state 
H\0) = (|0) + and the state |1) to H\l) = (|0) - |l))/%/2. By the inner 

product between two bit strings x and y, we mean the inner product modulo 2, 
that is: 

(f , y) = (xi • yi) ® • • • ® {XN ■ Vn) ■ (2) 

This value can also be viewed as the parity of a subset of the bit string yi ■ ■ - i/n- 
This subset is described by the characteristic vector x and its size equals the 
Hamming weight \\x\\ of the bit string xi ■ ■ ■ xn- 

The Hadamard transform of a sequence of bits j/i ■ • • j/at and the inner prod- 
uct function are closely related to each other: for any y e {0, 1}^ it holds 
that 

H^^\y) ^ ^ i~^f''^\^- (3) 

xe{o,i}" 

Because H is its own inverse, we can apply again a sequence of N Hadamard 
transforms on the state in Equation ^ and thus obtain the original bit string 
t/i • • • j/AT again: 

^^""(^ E (-i)^"'"^!^^) I = \y)- (4) 



xe{o,i} 
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The above leads to the observation that if we want to know the string yi • • • j/at, 
it is sufficient to have a superposition with phase values of the form (— 1)'^'^'^^ 
for every x G {0, 1}^. This is a well-known result in quantum computation and 
has been used several times to underline the differences between 

quantum and classical information processing. 



3 The Quantum Algorithm 
3.1 Outline of the Algorithm 

The algorithm presented here is an approximation of the procedure described 
in the Equations and ^. Instead of calculating the phase values (— 
for all X £ {0, 1} , we will do this only for the strings xi ■ ■ ■ xn which do not 
have a Hamming weight (the number of ones in a bit string) above a certain 
threshold k. By doing so, we can reduce the number of necessary oracle calls 
while obtaining an outcome which is still very close to the 'perfect state' as 
shown in Equation ^ (but now for lo instead of y) . 

As stated in Section |2.2| , the value (x, lo) corresponds to the parity of a 
set of Ui bits, where this set is determined by the ones in the string xi ■ ■ ■ xn- 
To calculate the parity we can perform a sequence of additions modulo 2 of 
the relevant coi values, where each uji has to be (and can be) obtained by one 
oracle call. It is therefore that the Hamming weight ||x|| equals the 'oracle call 
complexity' of the reversible procedure (for an arbitrary bit b € {0, 1}): 

\x)\b) 11-1°!^°^^"^ \x)\b®{x,Lu)) . (5) 

The number of oracle calls will be reduced by the usage of a threshold number 
k, such that we only compute the parity value {x,lu) if the Hamming weight of 
X is less than or equal to k. The algorithm that performs this conditional parity 
calculation is denoted by Ak and its behaviour is thus defined by: 

Mim = { |||^,*'^^-"» (6) 

It is important that this algorithm Ak requires at most k oracle calls for every 
xi - --Xn- Because A is reversible and does not induce any undesired phase 
changes, we can also apply it to a superposition of different x strings. This 
brings us finally to the actual algorithm. 



3.2 The Actual Algorithm 

Prepare the state which is an equally weighted superposition of bit strings 
of size N with Hamming weight |jx|| less than or equal to k and an additional 
qubit in the state (|0) — |1))/V2 attached to it: 
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Where Mk is the appropriate normahsation factor calculated by the number of 
X strings that have Hamming weight less than or equal to k: 



i=0 



Applying the above-described protocol (Equation ^) to this state yields 
(following Equation |l], and requiring fc oracle calls) : 



^Pfc) contain a part of the desired 
does for j/i • • -yj^). 



Here we see how the phases of the state 
information about lo\ - ■ ■ LOtq (like Equation | 

If we set fe to its maximum k = N , then, applying an iV-fold Hadamard to 
the first N qubits of A^j^I') would give us exactly the state |wi • • • w^r). Whereas 
the minimum value fc = leads to a state that does not reveal anything about 
w. For all the other possible values of k between and iV, there will be the 
situation that applying H'^^ to the x-register of Ak\^k) gives a state that is 
close to \loi ■ ■ ■ ljm) , but not exactly. For a given N, this fidelity (statistical 
correspondence) between the acquired state and uj depends on fc: as fc gets 
bigger, the fidelity increases. 

3.3 Analysis of the Algorithm 

The N qubits that should give wi • • • lon after the H'^^ transformation, is de- 
scribed by (see Equation ^ : 

||:c||</i: 

\%) = — = g (-l)(-"^)|f) . (10) 



x6{0,l}" 

The probability that this state gives the correct string of w-bits equals its fidelity 
with the perfect state l^'jy)- 

Prob(Afe outputs cJ) = \{%Wn)\^ (H) 

The signs of the amplitudes of Y^'^) and Ivf'^) will be the same for all registers x 
with |jx|j < fc, whereas for the other strings with \\x\\ > fc the amplitudes of |\E''j,) 
are zero. The fidelity between the two states can therefore be calculated in a 
straightforward way, yielding for the correctness probability (using Equation 



Proh{Ak outputs uj) = 



■1=0 ^ 



(12) 
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this equality shows the reason why the algorithm also works for values of k 
around n/2 + ^/n. for large n the binomial distribution approaches the Gaussian 
distribution. The requirement that the correctness probability has some value 
significantly greater than 1/2, translates into the requirement that k has to be 
bigger than the average N/2 by some multiple of the standard deviation ^/N /2 
of the Hamming weights over the set of bit strings {0, 1}''^. Following this line 
of reasoning, it can be shown that 

Prob(yl|^^y2+vWj outputs tj) > 0.95 (13) 

for any value of N. 

This proves that the following algorithm will give us the requested TV oracle 
values uji ■ ■ -lon with an error-rate of less than 5%, using only [iV/2 + \/N\ 
queries to the oracle. 

1. Initial state preparation: Prepare a register of + 1 qubits in the 
state ^LAf/2+\/lvj ^ as in Equation |[ 

2. Oracle calls: Apply the Ak procedure of Equation^, for k — \N /2+\fN\ 
oracle queries. 

3. Hadamard transformation: Perform N Hadamard transforms to the 
first N qubits on the register (the state I^PJ,) in Equation [To|) . 

4. Final observation: Observe the same first N qubits in the standard 
basis {|0), |1)}. The outcome of this observation is our guess for the oracle 
description ui - ■ -bjj^. This estimation of wi • • • lon will be correct for all 
N bits with a probability greater than 95%. 

An expected error-rate of significantly less than 5% can easily be obtained if we 
increase the threshold k with a multiple of the 'standard deviation' ^/N /2. The 
standard approximations of the binomial distribution by the Gaussian distribu- 
tion shows that for big N the error-probability goes to zero as the threshold 
increases, according to the exponential relation: 

Prob„.ror(fc = A^/2 + A\/7V) « i-iErf(V2A) 

= 0(2-^') . (14) 

It is therefore that we can say that an arbitrary small error probability can be 
achieved with only N/2 -j- 0{Vn) oracle calls. 

3.4 Comparison with Classical Algorithms 

Consider now a classical computer Bk that is allowed to query the oracle k times. 
This implies that after the procedure N—k bits of uj will be still unknown. Hence 
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the probabihty of guessing the correct A'^-bit string uji - ■ -lon by any classical 
algorithm is: 



Prob(i?fc outputs Lj) < -^j^ ■ (15) 

This shows, as expected, that a classical probabilistic computer needs all N 
oracle calls to obtain uj with high probability. The space complexity of the 
quantum and the classical algorithms is in both cases linear in N. 



4 Approximate Interrogation 

In this section we ask ourself what happens if we want to know only a certain 
fraction of the N unknown bits. In other words: Given a threshold of k oracle- 
queries, what is the maximum expected number of correct bits c that we can 
obtain via an 'approximate interrogation' procedure if we assume uj to be totally 
random? 



4.1 Classical Approximate Interrogation 

In the classical setting the analysis is again straightforward. If we query k out of 
N bits, then we know k bits with certainty and we have to randomly guess the 
other N — k bits of which we can expect 50% to be correct. The total number 
of correct bits will therefore be 

- f +^ (16) 

This shows a linear relation between k and c. 



4.2 Quantum Approximate Interrogation 

The quantum procedure for approximate interrogation will be the same algo- 
rithm as we used in the first part of the article, but with a different initial state 
^ . We now allow the amplitudes aj of ^ to depend on the Hamming weight of 
its basis states x. We therefore write for the initial state: 



n) = y^o^r r-. — - y. 1^)' (17) 




with the normalisation restriction — 1. 

After the preparation of this state the algorithm is continued in the 
same way as described in Section ^. The N bits outcome of this protocol will 
correspond to a certain degree with the interrogated bit string loi ■ ■ ■ ujn, where 
this degree depends on k and the amplitudes aj. 
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In the appendix it is shown that the expected number of correct bits for the 
quantum protocol wiU be 

/V , , 

cr"' = - + 5:a,a,+iyj + Tv/A^. (18) 

For a given k we can thus optimise the a values such that Ck will be as big as 
possible. Two examples of such optimisations will be given below, both of them 
showing an improvement over the classical algorithm. 

4.3 Interrogation with One Quantum Query 

If we allow the quantum computer to ask only one query to the oracle, then 
Equation ^ is maximised by choosing — ai — l/\/2, thus giving for the 
expected number of correct bits 



or- ^ T + (10) 

When we compare this with Equation we see that a classical algorithm 
would require k = \/N queries to match the power of a single quantum query. 

4.4 Interrogation with Many Queries 



Let us assume that N is big (such that vN/N « 0) and that fc is a fraction of 
with < k/N < 1/2. We can then define the amplitudes a according to 




< j < fc - \/fc 
k - y/k < j <k 



(20) 



This gives us for the expected ratio of correct bits 



quant 

^k/N 1 1 



j—k— V k 




(21) 

whereas for 1/2 < k/N < 1 we use the a amplitudes as if fc = N/2 (with 

Ck/N ~ 

In the same setting, the classical fraction of correct bits will be 

clas , 

^ = i + A. (22) 
N 2 2N ^ ^ 

Again we see (Figure ^ that the quantum algorithm performs better than the 
classical one, especially for the small values of k/N. As an example: If we allow 
the quantum protocol N/10 queries, then we can expect 80% of the bits to be 
correct. Any classical computer would need 6iV/10 queries to obtain such a 
ratio. 
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Approximate Interrogation for Big N: 




k/N 
fraction of queries — " 



classical interrogation: 

quantum interrogation: 



Figure 1: Comparison of the interrogation effectiveness between classical and 
quantum computers. 



5 Conclusions 

The model of quantum computation does not permit a general significant speed- 
up of the existing classical algorithms. Instead, we have to investigate for each 
different kind of problem whether there is a possible gain by using quantum 
algorithms or not. 

Here it has been shown that for every binary function lu with domain size 
N, we can obtain the full description of the function with high probability while 
querying uj only N/2 + ^/N times. A classical computer always requires N calls 
to determine oji ■ ■ - ujn with the same kind of success probability. 

The lower bounds on parity (with bounded error) and OR (with no allowed 
error) for black-boxes |6| show us that any quantum algorithm must use at 
least N/2 calls to obtain uj with bounded error, and that the full N queries 
are necessary to determine the string without error, respectively. The question 
that remains therefore, is if the -s/iV-term in the query complexity N/2 + y/N 
is necessary or can perhaps be reduced to the order of log A^, for example. 

The term 'approximate interrogation' was used for the scenario where we 
are interested in obtaining a certain fraction of the N unknown bits. Again 
we could see how a quantum procedure outperforms the possible classical algo- 
rithms (Figure 

For all results in this article we assumed cj to be a random oracle without any 
structure. Future research on quantum computational complexity could investi- 
gate similar questions for structured oracles (the white-box model). This might 
lead to results that widen the gap between classical and quantum computation 
even further than we did here. 
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A Appendix: The Expected Number of Correct 
Bits for the Quantum Algorithm 

In this appendix we will calculate how many bits we can expect to be correct for 
the quantum interrogation procedure with the initial state 5* of Equation 
We do this by assuming that the unknown bit string consists of zeros only: 
uj — • • • 0. The expected number of correct bits for the algorithm equals 
therefore the expected number of zeros of the observed output string y. Because 
we can make the assumption a; = without loss of generality, we can then 
afterwards conclude that this number will the expected number of correct bits 
for any uj. 

The inner-product between x and lo will be zero for every x, hence applying 
Ak to 5* will not change the initial state: 

k \m=3 

= I E 1^)- (23) 

vl ^ ) 

After this A^, we perform the N Hadamard transforms on all N qubits, yielding 
a new state: 

H^'^A.m) = E ; E ^^^1^) 

j=o f N \ xe{o,i}" 



J 



Y: E ; ' E i-^f^'^iy^ (24) 



J 



Because the above state is invariant under permutation, the probability of ob- 
serving a certain string y depends only on its Hamming weight ||y||. This, in 
combination with some other known equalitiesQl and mathematical techniques, 
enables us to express the expected number of zeros by 



N 

t=o ^ ^ 
N 

= y + E VI+^Vn - J . (25) 

We can therefore conclude that the expected number Ck of correctly guessed 
bits for the quantum protocol will be (for given k and aj): 

AT '^-l , 

cr"* = f +E".".+iV7TTyA^. (26) 

3=0 
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